Circuit Wire — a daily news update from the Circuit.
Fortune 500 distributor Wesco confirmed this week that it is investigating a cybersecurity incident after the extortion group ExfilSquad claimed to have stolen 2.6 million records from the company's cloud CRM system, Wesco told BleepingComputer.
Jennifer Sniderman, Wesco's vice president of corporate communications, said the company is aware of the claim, has worked with its cloud CRM vendor, and does not believe sensitive data is at risk. She said Wesco's investigation found no evidence of ransomware or other malware on its systems and that the company has not experienced any business disruption.
ExfilSquad said the stolen records include customer and employee personal information, account and contact data, CRM user profiles, credit and business identifiers, and authentication metadata. The group published the data after a deadline it set for Wesco to begin ransom negotiations passed. Wesco has not confirmed the scope of what, if anything, was taken and has not said how the intrusion occurred, though researchers tracking ExfilSquad say the group has previously targeted misconfigured Microsoft Power Pages data tables.
Wesco distributes electrical, communications and security products worldwide, employing about 21,000 people across roughly 700 distribution and fulfillment sites in 50 countries, with about $24 billion in sales last year.
ExfilSquad has claimed a string of recent breaches, including the theft and leak of data on more than 100,000 UK police and justice staff that Circuit Wire covered last week, chipmaker Analog Devices, and Newcastle University. The pattern points to data-extortion crews increasingly targeting CRM and other SaaS platforms, which hold rich troves of contact and account data without always drawing the same monitoring as core IT systems.
Want a weekly roundup of the major stories shaping the security industry? The On The Circuit newsletter is read by more than 12,000 protection professionals.
Spotted something we should cover? Send tips and feedback via circuit-magazine.com.